CVE-2026-76826

A flaw was found in tsParticles. The automated release workflow interpolates release note text directly into a shell command without proper sanitization. A remote attacker or contributor can exploit this vulnerability by submitting content containing shell control characters, leading to arbitrary...

CVE-2026-49272

A flaw was found in OAuthLib. This vulnerability allows a remote attacker to bypass authentication and obtain unauthorized access tokens during the device authorization workflow. By submitting a token request with a valid client identifier alongside an invalid or missing device authorization code...

Krawl

Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...

CVE-2026-54146

A flaw was found in OpenHuman. The desktop process exposes sensitive authentication tokens in its process environment, allowing other local processes running under the same user account to inspect and capture them. A local attacker can exploit this flaw to authenticate to the core service with th...

CVE-2026-121971

A flaw was found in Symfony HttpClient. The scoped HTTP client attaches default authentication credentials to requests before verifying that the resolved destination matches the intended trusted domain. A remote attacker who can control or influence the target URL can supply a specially crafted...

IMDSpoof

IMDSPOOF IMDSPOOF is a cyber deception tool that spoofs an AWS IMDS service. One way that attackers are able to escalate privileges or move laterally in a cloud environment is by retrieving AWS Access keys from the IMDS service endpoint located at...

pytmipe

PYTMIPE & TMIPE PYTMIPE PYthon library for Token Manipulation and Impersonation for Privilege Escalation is a Python 3 library for manipulating Windows tokens and managing impersonations in order to gain more privileges on Windows. TMIPE is the python 3 client which uses the pytmipe library...

CVE-2026-75759

A flaw was found in oidcc. This vulnerability allows an unauthenticated attacker to impersonate an arbitrary user. The oidcc component improperly verifies cryptographic signatures in encrypted ID tokens or JSON Web Application Response JARM responses. By exploiting this, an attacker can forge...

CVE-2026-117635

A flaw was found in Gitea. The administrative application programming interface API does not properly enforce public-only restrictions on personal access tokens. An authenticated attacker possessing a restricted administrator token can bypass these limitations to perform unauthorized administrati...

EvilSlackbot

EvilSlackbot A Slack Attack Framework for conducting Red Team and phishing exercises within Slack workspaces. Disclaimer This tool is intended for Security Professionals only. Do not use this tool against any Slack workspace without explicit permission to test. Use at your own risk. Background...

sign-saboteur

SignSaboteur SignSaboteur is a Burp Suite extension for editing, signing, verifying, and attacking signed tokens. It supports different types of tokens: Django TimestampSigner, ItsDangerous Signer, Express cookie-session middleware, OAuth2 Proxy, Tornado’s signed cookies, Ruby Rails Signed cookie...

CVE-2026-97847

A flaw was found in the protocol mapper and identity resolution components of Keycloak. The issue occurs when a client manager uses hardcoded-claim mappers to override identity claims in sessionless service-account tokens. Because these tokens lack a session ID, Keycloak may incorrectly resolve t...

CVE-2026-92857

Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own applications. A flaw in how Keycloak validates these registration requests allows an attacker to create a malicious application that forges identity information. By mapping their o...

talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project Using with hook frameworks Pre-commit Husky Directly invoking talisman Upgradi...

EUVD-2026-117612

A flaw was found in the protocol mapper and identity resolution components of Keycloak. The issue occurs when a client manager uses hardcoded-claim mappers to override identity claims in sessionless service-account tokens. Because these tokens lack a session ID, Keycloak may incorrectly resolve t...

CVE-2026-97847 Keycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator authority

A flaw was found in the protocol mapper and identity resolution components of Keycloak. The issue occurs when a client manager uses hardcoded-claim mappers to override identity claims in sessionless service-account tokens. Because these tokens lack a session ID, Keycloak may incorrectly resolve t...

CVE-2026-97847

A vulnerability exists in the protocol mapper and identity resolution components of Keycloak . The flaw allows a client manager to use hardcoded-claim mappers to override identity claims in sessionless service-account tokens. Since these tokens lack a session ID, Keycloak may incorrectly resolve ...

CVE-2026-97847

A flaw was found in the protocol mapper and identity resolution components of Keycloak. The issue occurs when a client manager uses hardcoded-claim mappers to override identity claims in sessionless service-account tokens. Because these tokens lack a session ID, Keycloak may incorrectly resolve t...

CVE-2026-92857 Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokens

Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own applications. A flaw in how Keycloak validates these registration requests allows an attacker to create a malicious application that forges identity information. By mapping their o...

talos

Chat · Discussions · Newsletter · Docs · Try Ory Network · Jobs Ory Talos is a scalable and secure API key server optimized for low-latency verification, horizontal scaling, and predictable operations. It follows established security best-practices for API keys and issues, verifies, revokes, and...